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The Growing Threert to Information 
Systems Security 

IiiJi4(ittli<Nt(/chift4v^y c<iM< lY* llie Keller. 1 1 (ffitvcinili 
iroct oil %1S bdliati in 1 <JW. Wittimits civdum ;ifEcnac 
(k>vrmnicf« anpi^yed IXj£l*hnt"<^Mirtu«t .<xhuol<>£ 
and nper jted 25*fllft medium and Lir^miinframc cr\ 
mofO tlm* two niilliort ind vidi jl w^rtc Malices. 1 I1*e I 
cat Defense h<£ <nrr nvci tiiUmn cKinjHiicn, 1 (MUM 1<< 
networks, and UKi)onj-<|$(wccnnap'fc$, ihc civil j 
a critical rc^xmsihiliiy conuiinl^in privacy jmrtvervk 
public uiinj auKu laced ikui ptoeownguml vlyi ij; 04 
IftfrtftraJtan Wrostructufe. JuM as critical unhc- D 
IXf erne i* its aNl l y to cany cm any itt kskti th at i* <Jl 
islorroqU*) carried aoJ !Hip]x«tC4l tx die NU. If 11 
bilii cs it hot 1 the civilian ,-*nd miliary cecum of povJ 
beavik depet ctau upturns uiiioxuivJ.p^ci>liaUi una| 
Internee, the Cmvfrimwtu address u-he.tar Jiis 
du: till <-uul • ill) is acocfUiHc and. if sci, bou T t<* ttiai| 
itmJvcd, 

^kn.n^ iihttmKlu^ cou*idc*ibtc .apcodiiurc* 011 inform 
ngy.llWfc exKft a w iticiii if CfcHsm M*wli Ihc mxx% 
rcqtiiranoitsiff a*d the prouxahm anivictaJ Un tnclu 
systems juvcnrnieail w ule tiod tho^e -gipjfitfd m <bc dij ^ 
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\Iriforittaiian technology COStit far the Federal Government Cx- 
i$25balhanin 1995. Within its civilian agcncicMhe 



i(l)roiKrat employed i^OA^MornraUcwtcchnolci^ vvtsTtos, 
and operated 25,000 medium and large mainframe computers and 
more than uvo million individual ivork stations* 1 The l>enartmeRt 



of Defense has over two million computers, 10,000 local area 
networks, and 100 long-distance networks. The civilian sector has 
a critical responsibility to maintain privacy and services for the 
public usingautontaied data pn^cessina and relying on die National 
Inrb^f^Lo wtntrascruciurcJ Just as critical to the Department of 
Defense is its ability to carry uut any mission that is dependent on 
information carried an and supported by the NIL If key responsi- 
bilities of both the civilian and military sectors of government are 
heavily dependent upon an unsecured, potentially nnayajlaftte 



lr <d)(5), (b)(6), (b)(8)/ (tfnust address wnctner ttus reliance on 
trie Nir (and Gil) U acceptable and, if how io manage the risks 
involved. 



I Kb) (aistanding ayslderablel expeiiditnres on information technol- 
ogy, were exists a wdening ctutsm between the security 
n^winflfttenteof and W protection provided forundavsLfied 
&ystcni^govcrpmcin-\idc and tho se applied to the classified 
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